CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 231:

  What are the advantages of a "shared policy" in R80?

  A. Allows the administrator to share a policy between all the users identified by the Security Gateway

  B. Allows the administrator to share a policy between all the administrators managing the Security Management Server

  C. Allows the administrator to share a policy so that it is available to use in another Policy Package

  D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

  Correct Answer: C

• Question 232:

  To view statistics on detected threats, which Threat Tool would an administrator use?

  A. Protections

  B. IPS Protections

  C. Profiles

  D. ThreatWiki

  Correct Answer: D

• Question 233:

  What is the purpose of a Clean-up Rule?

  A. Clean-up Rules do not server any purpose.

  B. Provide a metric for determining unnecessary rules.

  C. To drop any traffic that is not explicitly allowed.

  D. Used to better optimize a policy.

  Correct Answer: C

  These are basic access control rules we recommend for all Rule Bases:

  1.

  Stealth rule that prevents direct access to the Security Gateway.

  2.

  Cleanup rule that drops all traffic that is not allowed by the earlier rules.

  There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

• Question 234:

  What are the two types of NAT supported by the Security Gateway?

  A. Destination and Hide

  B. Hide and Static

  C. Static and Source

  D. Source and Destination

  Correct Answer: B

  A Security Gateway can use these procedures to translate IP addresses in your network:

  1.

  Static NAT - Each internal IP address is translated to a different public IP address. The Firewall can allow external traffic to access internal resources.

  2.

  Hide NAT - The Firewall uses port numbers to translate all specified internal IP addresses to a single public IP address and hides the internal IP structure. Connections can only start from internal computers, external computers CANNOT access internal servers. The Firewall can translate up to 50,000 connections at the same time from external computers and servers.

  3.

  Hide NAT with Port Translation - Use one IP address and let external users access multiple application servers in a hidden network. The Firewall uses the requested service (or destination port) to send the traffic to the correct server. A typical configuration can use these ports: FTP server (port 21), SMTP server (port 25) and an HTTP server (port 80). It is necessary to create manual NAT rules to use Port Translation.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/6724.htm

• Question 235:

  Vanessa is attempting to log into the Gaia Web Portal. She is able to login successfully. Then she tries the same username and password for SmartConsole but gets the message in the screenshot image below. She has checked that the IP address of the Server is correct and the username and password she used to login into Gaia is also correct.

  

  What is the most likely reason?

  A. Check Point R80 SmartConsole authentication is more secure than in previous versions and Vanessa requires a special authentication key for R80 SmartConsole. Check that the correct key details are used.

  B. Check Point Management software authentication details are not automatically the same as the Operating System authentication details. Check that she is using the correct details.

  C. SmartConsole Authentication is not allowed for Vanessa until a Super administrator has logged in first and cleared any other administrator sessions.

  D. Authentication failed because Vanessa's username is not allowed in the new Threat Prevention console update checks even though these checks passed with Gaia.

  Correct Answer: B

• Question 236:

  What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

  A. The Global one also saves and published the session before installation.

  B. The Global one can install multiple selected policies at the same time.

  C. The local one does not install the Anti-Malware policy along with the Network policy.

  D. The second one pre-select the installation for only the current policy and for the applicable gateways.

  Correct Answer: D

• Question 237:

  Which of the following is used to initially create trust between a Gateway and Security Management Server?

  A. Internal Certificate Authority

  B. Token

  C. One-time Password

  D. Certificate

  Correct Answer: C

  To establish the initial trust, a gateway and a Security Management Server use a one-time password. After the initial trust is established, further communication is based on security certificates.

  Reference:

  https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/125443

• Question 238:

  John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John's changes available to other administrators, and to save the database before installing a policy, what must John do?

  A. Logout of the session

  B. File > Save

  C. Install database

  D. Publish the session

  Correct Answer: D

  Installing and Publishing

  It is important to understand the differences between publishing and installing.

  You must do this: After you did this:

  Publish Opened a session in SmartConsole and made changes.

  The Publish operation sends all SmartConsole modifications to other

  administrators, and makes the changes you made in a private session

  public.

  Install the database Modified network objects, such as servers, users, services, or IPS

  profiles, but not the Rule Base.

  Updates are installed on management servers and log servers.

  Install a policy Changed the Rule Base.

  The Security Management Server installs the updated policy and the

  entire database on Security Gateways (even if you did not modify any

  network objects).

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 239:

  Fill in the blanks: There are ________ types of software containers ________.

  A. Three; security management, Security Gateway, and endpoint security

  B. Three; Security gateway, endpoint security, and gateway management

  C. Two; security management and endpoint security

  D. Two; endpoint security and Security Gateway

  Correct Answer: A

  There are three types of Software Containers: Security Management, Security Gateway, and Endpoint Security.

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=11608

• Question 240:

  Fill in the bank: In Office mode, a Security Gateway assigns a remote client to an IP address once___________.

  A. the user connects and authenticates

  B. office mode is initiated

  C. the user requests a connection

  D. the user connects

  Correct Answer: A

  Office Mode enables a Security Gateway to assign a remote client an IP address. The assignment takes place once the user connects and authenticates. The assignment lease is renewed as long as the user is connected.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13857.htm